The following Fedora 14 Security updates need testing:
https://admin.fedoraproject.org/updates/bind-9.7.4-0.2.b1.fc14
https://admin.fedoraproject.org/updates/couchdb-1.0.2-4.fc14
https://admin.fedoraproject.org/updates/avahi-0.6.27-6.fc14
https://admin.fedoraproject.org/updates/pure-ftpd-1.0.32-1.fc14
https://admin.fedoraproject.org/updates/unbound-1.4.8-2.fc14
https://admin.fedoraproject.org/updates/drupal7-7.2-1.fc14
https://admin.fedoraproject.org/updates/drupal-6.22-1.fc14
https://admin.fedoraproject.org/updates/cyrus-imapd-2.3.16-8.fc14
https://admin.fedoraproject.org/updates/tomcat6-6.0.26-21.fc14
https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14
https://admin.fedoraproject.org/updates/kernel-2.6.35.13-92.fc14
https://admin.fedoraproject.org/updates/jabberd-2.2.14-1.fc14
https://admin.fedoraproject.org/updates/phpMyAdmin-3.4.1-1.fc14
https://admin.fedoraproject.org/updates/mutt-1.5.21-5.fc14
https://admin.fedoraproject.org/updates/rdesktop-1.6.0-11.fc14
https://admin.fedoraproject.org/updates/mumble-1.2.3-2.fc14
https://admin.fedoraproject.org/updates/wireshark-1.4.7-1.fc14
https://admin.fedoraproject.org/updates/weechat-0.3.5-1.fc14
https://admin.fedoraproject.org/updates/gimp-2.6.11-14.fc14
https://admin.fedoraproject.org/updates/libxml-1.8.17-26.fc14
The following Fedora 14 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/file-5.04-17.fc14
https://admin.fedoraproject.org/updates/yum-3.2.28-7.fc14
https://admin.fedoraproject.org/updates/module-init-tools-3.11.1-6.fc14
https://admin.fedoraproject.org/updates/metacity-2.30.3-2.fc14
https://admin.fedoraproject.org/updates/selinux-policy-3.9.7-42.fc14
https://admin.fedoraproject.org/updates/libcdio-0.82-4.fc14
https://admin.fedoraproject.org/updates/libcgroup-0.36.2-7.fc14
https://admin.fedoraproject.org/updates/dash-0.5.6-4.fc14
https://admin.fedoraproject.org/updates/PackageKit-0.6.12-3.fc14
https://admin.fedoraproject.org/updates/pcre-8.10-2.fc14
https://admin.fedoraproject.org/updates/libedit-3.0-3.20090923cvs.fc14
https://admin.fedoraproject.org/updates/libpcap-1.1.1-3.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-qxl-0.0.21-3.fc14
https://admin.fedoraproject.org/updates/evolution-exchange-2.32.3-1.fc14,evolution-data-server-2.32.3-1.fc14,evolution-2.32.3-1.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-nouveau-0.0.16-14.20101010git8c8f15c.fc14
https://admin.fedoraproject.org/updates/dosfstools-3.0.9-6.fc14
https://admin.fedoraproject.org/updates/libimobiledevice-1.0.6-1.fc14
https://admin.fedoraproject.org/updates/libconcord-0.23-5.fc14,udev-161-9.fc14,concordance-0.23-2.fc14
https://admin.fedoraproject.org/updates/usbmuxd-1.0.7-1.fc14
https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14
https://admin.fedoraproject.org/updates/avahi-0.6.27-6.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-geode-2.11.11-4.fc14
The following builds have been pushed to Fedora 14 updates-testing
bcfg2-1.1.2-1.fc14
collectl-3.5.1-1.fc14
deltacloud-core-0.3.0-9.fc14
dracut-modules-olpc-0.5.11-1.fc14
etckeeper-0.54-1.fc14
file-5.04-17.fc14
iproute-2.6.35-9.fc14
jabberd-2.2.14-1.fc14
lapack-3.2.2-4.fc14
libxml-1.8.17-26.fc14
lyx-2.0.0-4.fc14
memtest86+-4.20-1.fc14
mercurial-1.8.4-2.fc14
perl-IO-Socket-INET6-2.66-1.fc14
qbittorrent-2.8.0-1.fc14
roundup-1.4.18-1.fc14
rpld-1.8-0.8.beta1.fc14
rwho-0.17-35.fc14
tgif-4.2.3-1.fc14
vnstat-1.11-1.fc14
weechat-0.3.5-1.fc14
wireshark-1.4.7-1.fc14
wordpress-3.1.3-3.fc14
x509watch-0.4.0-1.fc14
xarchiver-0.5.2-8.fc14
zabbix-1.8.5-2.fc14
Details about builds:
================================================================================
bcfg2-1.1.2-1.fc14 (FEDORA-2011-7850)
Configuration management system
--------------------------------------------------------------------------------
Update Information:
* Thu Jun 02 2011 Fabian Affolter <fabian@xxxxxxxxxxxxxxxxx> - 1.1.2-1
- Updated to new upstream version 1.1.2
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 2 2011 Fabian Affolter <fabian@xxxxxxxxxxxxxxxxx> - 1.1.2-1
- Updated to new upstream version 1.1.2
--------------------------------------------------------------------------------
================================================================================
collectl-3.5.1-1.fc14 (FEDORA-2011-7827)
A utility to collect various Linux performance data
--------------------------------------------------------------------------------
Update Information:
update to upstream version 3.5.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 2 2011 Dan HorÃk <dan[at]danny.cz> 3.5.1-1
- upgrade to upstream version 3.5.1
--------------------------------------------------------------------------------
================================================================================
deltacloud-core-0.3.0-9.fc14 (FEDORA-2011-7851)
Deltacloud REST API
--------------------------------------------------------------------------------
Update Information:
Added config file for Fedora and provides.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 2 2011 Michal Fojtik <mfojtik@xxxxxxxxxx> - 0.3.0-9
- Replaced Obsoletes with Provides
--------------------------------------------------------------------------------
================================================================================
dracut-modules-olpc-0.5.11-1.fc14 (FEDORA-2011-7817)
OLPC modules for dracut initramfs
--------------------------------------------------------------------------------
Update Information:
Fix creation of /versions/running symlink.
Fix purging of unpartitioned boot configs
Start boot animation during version purging
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 1 2011 Daniel Drake <dsd@xxxxxxxxxx> - 0.5.11-1
- Fix creation of /versions/running link
* Mon May 30 2011 Daniel Drake <dsd@xxxxxxxxxx> - 0.5.10-1
- Fix purging of unpartitioned boot configs
* Tue May 17 2011 Daniel Drake <dsd@xxxxxxxxxx> - 0.5.9-1
- Start boot animation while purging old versions
--------------------------------------------------------------------------------
================================================================================
etckeeper-0.54-1.fc14 (FEDORA-2011-7853)
Store /etc in a SCM system (git, mercurial, bzr or darcs)
--------------------------------------------------------------------------------
Update Information:
Update to 0.54, a bugfix version. From the upstream changelog:
* Ignore inssev's FHS violating /etc/init.d/.depend.* files.
* Use hg pre-commit hook, rather than its precommit hook, as the latter is run after the files staged for commit are determined and so .etckeeper cannot be staged as part of the current commit.
Furthermore, we include a patch to fix error propagation to yum, which makes AVOID_COMMIT_BEFORE_INSTALL work (bz 709487).
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 1 2011 Thomas Moschny <thomas.moschny@xxxxxx> - 0.54-1
- Update to 0.54.
- Add patch for bz 709487.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #709487 - yum fails to honor AVOID_COMMIT_BEFORE_INSTALL
https://bugzilla.redhat.com/show_bug.cgi?id=709487
--------------------------------------------------------------------------------
================================================================================
file-5.04-17.fc14 (FEDORA-2011-7815)
A utility for determining file types
--------------------------------------------------------------------------------
Update Information:
Adds "magic" definition for Canon CR2 RAW format.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 1 2011 Jan Kaluza <jkaluza@xxxxxxxxxx> - 5.04-17
- fix #709520 - backported CR2 format detection
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #709520 - Add "magic" definition for Canon CR2 RAW format
https://bugzilla.redhat.com/show_bug.cgi?id=709520
--------------------------------------------------------------------------------
================================================================================
iproute-2.6.35-9.fc14 (FEDORA-2011-7781)
Advanced IP routing and network device configuration tools
--------------------------------------------------------------------------------
Update Information:
Fix GRED options clearing
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 1 2011 Petr Sabata <contyk@xxxxxxxxxx> - 2.6.35-9
- Include cb4bd0ec8 (#707984)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #707984 - TC: GRED in grio mode VQs prio parameter does not work (value doesn't change)
https://bugzilla.redhat.com/show_bug.cgi?id=707984
--------------------------------------------------------------------------------
================================================================================
jabberd-2.2.14-1.fc14 (FEDORA-2011-7805)
OpenSource server implementation of the Jabber protocols
--------------------------------------------------------------------------------
Update Information:
This update fixes an important security issue (CVE-2011-1755), for more information, please see https://bugzilla.redhat.com/show_bug.cgi?id=700390.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 1 2011 Dominic Hopf <dmaphy@xxxxxxxxxxxxxxxxx> - 2.2.14-1
- update to 2.2.14 (#700390, CVE-2011-1755)
- remove unneeded upstart configuration files
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #700390 - CVE-2011-1755 jabberd: DoS via the XML "billion laughs attack"
https://bugzilla.redhat.com/show_bug.cgi?id=700390
--------------------------------------------------------------------------------
================================================================================
lapack-3.2.2-4.fc14 (FEDORA-2011-7796)
Numerical linear algebra package libraries
--------------------------------------------------------------------------------
Update Information:
Fix manl directory perms and ownership.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 2 2011 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 3.2.2-4
- create /usr/share/man/manl/ as 0755 and own it in lapack and blas (bz634369)
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.2.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #634369 - lapack documentation quite inaccesible
https://bugzilla.redhat.com/show_bug.cgi?id=634369
--------------------------------------------------------------------------------
================================================================================
libxml-1.8.17-26.fc14 (FEDORA-2011-7856)
Old XML library for Gnome-1 application compatibility
--------------------------------------------------------------------------------
Update Information:
This update addresses CVE-2011-1944 (heap-based buffer overflow by adding a new namespace node to an existing nodeset or merging nodesets). It is described in detail at http://scarybeastsecurity.blogspot.com/2011/05/libxml-vulnerability-and-interesting.html
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 2 2011 Paul Howarth <paul@xxxxxxxxxxxx> 1:1.8.17-26
- add patch for CVE-2011-1944 (#709751)
- add %check section and run regression tests (note that diffs appearing in
the output do not cause the build to fail)
- nobody else likes macros for commands
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1:1.8.17-25
- rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #709747 - CVE-2011-1944 libxml, libxml2: Heap-based buffer overflow by adding new namespace node to an existing nodeset or merging nodesets
https://bugzilla.redhat.com/show_bug.cgi?id=709747
--------------------------------------------------------------------------------
================================================================================
lyx-2.0.0-4.fc14 (FEDORA-2011-7794)
WYSIWYM (What You See Is What You Mean) document processor
--------------------------------------------------------------------------------
Update Information:
Add missing file (LaTeXConfig.lyx)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 1 2011 Josà Matos <jamatos@xxxxxxxxxxxxxxxxx> - 2.0.0-4
- LaTeXConfig.lyx is no longer a ghost (#684428)
* Thu May 26 2011 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 2.0.0-3
- fix hunspell support (use pkgconfig)
* Thu May 26 2011 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 2.0.0-2
- rebuild (hunspell)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #684428 - file LaTeXConfig.lyx missing
https://bugzilla.redhat.com/show_bug.cgi?id=684428
--------------------------------------------------------------------------------
================================================================================
memtest86+-4.20-1.fc14 (FEDORA-2011-7852)
Stand-alone memory tester for x86 and x86-64 computers
--------------------------------------------------------------------------------
Update Information:
This is new version that fixes various bugs and adds support for Intel
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 2 2011 Jaroslav Åkarvada <jskarvad@xxxxxxxxxx> - 4.20-1
- Update to new version (#682425)
- Removed fix-asciimap patch (not needed now)
- Removed make-gcc4-builds-work patch (not used)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #709930 - Please update to v4.20 which is needed for sandy bridge
https://bugzilla.redhat.com/show_bug.cgi?id=709930
--------------------------------------------------------------------------------
================================================================================
mercurial-1.8.4-2.fc14 (FEDORA-2011-7786)
Mercurial -- a distributed SCM
--------------------------------------------------------------------------------
Update Information:
see: http://http://mercurial.selenic.com/wiki/WhatsNew
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 2 2011 Neal Becker <ndbecker2@xxxxxxxxx> - 1.8.4-2
- Add docutils-0.8 patch
* Wed Jun 1 2011 Neal Becker <ndbecker2@xxxxxxxxx> - 1.8.4-1
- Update to 1.8.4
--------------------------------------------------------------------------------
================================================================================
perl-IO-Socket-INET6-2.66-1.fc14 (FEDORA-2011-7798)
Perl Object interface for AF_INET|AF_INET6 domain sockets
--------------------------------------------------------------------------------
Update Information:
A new, bugfix version of IO::Socket::INET6 is available.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 13 2011 Paul Howarth <paul@xxxxxxxxxxxx> - 2.66-1
- Update to 2.66
- Fix inet_pton/inet_ntop import warnings (CPAN RT#55901)
- Fix listening on :: or 0.0.0.0 (CPAN RT#54656)
- Add test listen_port_only.t
- Solved problems with multihomed and family order (CPAN RT#57676)
- Fix select timeout issue in t/io_multihomed6.t
- Fix t/io_multihomed6.t on systems with broken getaddrinfo() (CPAN RT#58198)
- Made the "use Socket" call import constants selectively, and not rely on
@EXPORT's whims
* Thu Jan 13 2011 Paul Howarth <paul@xxxxxxxxxxxx> - 2.57-4
- s/PERL_INSTALL_ROOT/DESTDIR/
- re-enable the test suite
- BR: perl(Test::More), perl(Test::Pod), perl(Test::Pod::Coverage)
* Mon Dec 20 2010 Marcela Maslanova <mmaslano@xxxxxxxxxx> - 2.57-3
- Rebuild to fix problems with vendorarch/lib (#661697)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #619785 - Please update to 2.65
https://bugzilla.redhat.com/show_bug.cgi?id=619785
--------------------------------------------------------------------------------
================================================================================
qbittorrent-2.8.0-1.fc14 (FEDORA-2011-7842)
A Bittorrent Client
--------------------------------------------------------------------------------
Update Information:
* Thu Jun 02 2011 - Christophe Dumez <chris@xxxxxxxxxxxxxxx> - v2.8.0
- FEATURE: Added full libtorrent v0.16 support (uTP, ...)
- FEATURE: Proxy can be disabled for peer connections
- FEATURE: Added support for secure SMTP connection (SSL)
- FEATURE: Added support for SMTP authentication
- FEATURE: Added UPnP/NAT-PMP port forward for the Web UI port
- FEATURE: qBittorrent can update dynamic DNS services (DynDNS, no-ip)
- FEATURE: Display peer connection type in peer list (BT, uTP, Web)
- FEATURE: Added full regex support to RSS downloader
- FEATURE: Added regex help and validation in RSS downloader
- FEATURE: Added HTTPS support to Web UI (Ishan Arora)
- BUGFIX: Change systray icon on the fly (no restart needed)
- BUGFIX: Remember peer-level rate limits (requires libtorrent v0.16)
- BUGFIX: Stop annoncing to trackers an all tiers (more respectful)
- BUGFIX: Stop sharing private trackers with other peers
- BUGFIX: Tracker exchange extension can be disabled
- BUGFIX: Cleaner program exit on system log out
- BUGFIX: Fix possible magnet link parsing problems
- BUGFIX: Fix possible RSS URL parsing problems
- COSMETIC: Added monochrome icon for light themes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 2 2011 Leigh Scott <leigh123linux@xxxxxxxxxxxxxx> - 1:2.8.0-1
- update to 2.8.0
--------------------------------------------------------------------------------
================================================================================
roundup-1.4.18-1.fc14 (FEDORA-2011-7812)
Simple and flexible issue-tracking system
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.18.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 1 2011 John Khvatov <ivaxer@xxxxxxxxxxxxxxxxx> - 1.4.18-1
- updated to 1.4.18
- added roundup-doc subpackage for documentation
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.4.15-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #700053 - roundup-1.4.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=700053
--------------------------------------------------------------------------------
================================================================================
rpld-1.8-0.8.beta1.fc14 (FEDORA-2011-7855)
RPL/RIPL remote boot daemon
--------------------------------------------------------------------------------
Update Information:
Added standard initscript.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 2 2011 Paul P. Komkoff Jr <i@xxxxxxxxxx> - 1.8-0.8.beta1
- add initscript
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.8-0.7.beta1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #487226 - [RFE] No Startup Script for RPL boot daemon
https://bugzilla.redhat.com/show_bug.cgi?id=487226
--------------------------------------------------------------------------------
================================================================================
rwho-0.17-35.fc14 (FEDORA-2011-7854)
Displays who is logged in to local network machines
--------------------------------------------------------------------------------
Update Information:
This is an update that fixes a ruptime info in case rwhod has been started without properly configured network.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 2 2011 Honza Horak <hhorak@xxxxxxxxxx> - 0.17-35
- applied patch from Ian Donaldson to transmit status reliably
(bug #708385)
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.17-34
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #708385 - rwhod doesn't transmit reliably if using DHCP
https://bugzilla.redhat.com/show_bug.cgi?id=708385
--------------------------------------------------------------------------------
================================================================================
tgif-4.2.3-1.fc14 (FEDORA-2011-7783)
2-D drawing tool
--------------------------------------------------------------------------------
Update Information:
New version 4.2.3 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 1 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 4.2.3-1
- 4.2.3
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 4.2.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
vnstat-1.11-1.fc14 (FEDORA-2011-7778)
Console-based network traffic monitor
--------------------------------------------------------------------------------
Update Information:
Upstream changes for 1.11 / 1-Jun-11:
- Fix: Memory allocation was miscalculated when creating interface list from /sys/class/net when /proc/net/dev wasn't available which in turn could crash the daemon
- Fix: Daemon database cache could remain empty after a -HUP signal
- Fix: Don't make temp directory in vnstat.cgi writable for everyone
- Import GNU/kFreeBSD support from Debian (#608963, patch by Mats Erik Andersson)
- Remove usage of GNU only '-D' option for install for BSD in Makefile
- The daemon now automatically creates databases for available interfaces if no databases are found during startup
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 2 2011 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> - 1.11-1
- Upgrade to 1.11
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.10-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
weechat-0.3.5-1.fc14 (FEDORA-2011-7839)
Portable, fast, light and extensible IRC client
--------------------------------------------------------------------------------
Update Information:
Update to most recent + spell->aspell rename.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 2 2011 Paul P. Komkoff Jr <i@xxxxxxxxxx> - 0.3.5-1
- new upstream version
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.3.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #688751 - CVE-2011-1428 weechat: improper verification of X.509 certificates can lead to MITM attacks
https://bugzilla.redhat.com/show_bug.cgi?id=688751
--------------------------------------------------------------------------------
================================================================================
wireshark-1.4.7-1.fc14 (FEDORA-2011-7846)
Network traffic analyzer
--------------------------------------------------------------------------------
Update Information:
Upgrade to latest release, fixing few security bugs. See http://www.wireshark.org/docs/relnotes/wireshark-1.4.7.html.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 2 2011 Jan Safranek <jsafrane@xxxxxxxxxx> - 1.4.7-1
- upgrade to 1.4.7
- see http://www.wireshark.org/docs/relnotes/wireshark-1.4.7.html
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #710109 - CVE-2011-2175 wireshark: Heap-based buffer over-read in Visual Networks dissector
https://bugzilla.redhat.com/show_bug.cgi?id=710109
[ 2 ] Bug #710097 - CVE-2011-2174 wireshark: Double-free flaw by uncompressing of a zlib compressed packet
https://bugzilla.redhat.com/show_bug.cgi?id=710097
[ 3 ] Bug #710039 - CVE-2011-1959 wireshark: Stack-based buffer over-read from tvbuff buffer
https://bugzilla.redhat.com/show_bug.cgi?id=710039
[ 4 ] Bug #710021 - CVE-2011-1957 wireshark: Infinite loop in the DICOM dissector
https://bugzilla.redhat.com/show_bug.cgi?id=710021
--------------------------------------------------------------------------------
================================================================================
wordpress-3.1.3-3.fc14 (FEDORA-2011-7837)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
Fix old FSF address and Summary to make rpmlint happy.
Make wp-content directory owned by apache:apache.
Correctly Provides/Obsoletes (with versions).
Upgrade to the latest upstream version (security fixes and enhancements, BZ 707772).
Move wp-content directory to /var/www/wordpress/ (BZ 522897).
Simplify overly detailed files list.
Actually, we just don't need gettext.php at all, it is provided by
php itself. Just remove the file, don't make a symlink.
Revert back to wp-content in /usr/share/wordpress, I am not able to make it
work. Not fixing BZ 522897.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 2 2011 MatÄj Cepl <mcepl@xxxxxxxxxx> - 3.1.3-3
- Actually, we just don't need gettext.php at all, it is provided by
php itself. Just remove the file, don't make a symlink.
- revert back to wp-content in /usr/share/wordpress, I am not able to make it
work. Not fixing BZ 522897.
* Wed Jun 1 2011 MatÄj Cepl <mcepl@xxxxxxxxxx> - 3.1.3-2
- Fix old FSF address and Summary to make rpmlint happy.
- Make wp-content directory owned by apache:apache
- Correctly Provides/Obsoletes (with versions)
* Wed May 25 2011 MatÄj Cepl <mcepl@xxxxxxxxxx> - 3.1.3-1
- Upgrade to the latest upstream version (security fixes and enhancements, BZ 707772)
- Move wp-content directory to /var/www/wordpress/ (BZ 522897)
- Simplify overly detailed %files
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #707772 - New upstream version 3.1.3 has been released
https://bugzilla.redhat.com/show_bug.cgi?id=707772
[ 2 ] Bug #522897 - Unable To Upload Images To /usr/share/wordpress/wp-content/uploads/
https://bugzilla.redhat.com/show_bug.cgi?id=522897
--------------------------------------------------------------------------------
================================================================================
x509watch-0.4.0-1.fc14 (FEDORA-2011-7831)
Simple tool to list expiring or expired X.509 certificates
--------------------------------------------------------------------------------
Update Information:
Upstream changes for 0.4.0:
- Mail from cronjob with x509watch output has now logwatch style
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 2 2011 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 0.4.0-1
- Upgrade to 0.4.0
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.3.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
xarchiver-0.5.2-8.fc14 (FEDORA-2011-7807)
Archive manager for Xfce
--------------------------------------------------------------------------------
Update Information:
This update add xz support and fixes support for 7z. Encrypted archives however are not supported.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 2 2011 Christoph Wickert <cwickert@xxxxxxxxxxxxxxxxx> - 0.5.2-8
- Fix 7zip. Encrypted archives are still not supported.
* Thu Jun 2 2011 Christoph Wickert <cwickert@xxxxxxxxxxxxxxxxx> - 0.5.2-7
- Add xz support. Thanks to Robby Workman and Daniel Hokka Zakrisson (#577480)
- Remove mime-type multipart/x-zip (#666066)
- Fix crash in IA__gtk_tree_model_get_valist. Thanks to Bastiaan Jacques (#690012)
- Update icon-cache scriptlets
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.5.2-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #577480 - Won't handle xz compressed files; can't open rpm files
https://bugzilla.redhat.com/show_bug.cgi?id=577480
[ 2 ] Bug #666066 - Warning in fedora-xarchiver.desktop: MIME type "multipart/x-zipl" is discouraged
https://bugzilla.redhat.com/show_bug.cgi?id=666066
[ 3 ] Bug #690012 - [abrt] xarchiver-0.5.2-6.fc15: IA__gtk_tree_model_get_valist: Process /usr/bin/xarchiver was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=690012
--------------------------------------------------------------------------------
================================================================================
zabbix-1.8.5-2.fc14 (FEDORA-2011-7804)
Open-source monitoring solution for your IT infrastructure
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 23 2011 Dan HorÃk <dan[at]danny.cz> - 1.8.5-2
- include /var/lib/zabbix and /etc/zabbix/externalscripts dirs in package (#704181)
- add snmp trap receiver script in package (#705331)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #704181 - AlertScriptPath points to a directory that doesn't exist
https://bugzilla.redhat.com/show_bug.cgi?id=704181
[ 2 ] Bug #705331 - SNMP trap shell script
https://bugzilla.redhat.com/show_bug.cgi?id=705331
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
